$ rpki-client -vvvf rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.mft File: B7A0E7998A9F266F3882F19118691CB225356F5D.mft (raw, json) Hash identifier: aeZ33Rz/v/UY6eZjlJcBExDTtsAxp6dagsaOG2kPqKI= Subject key identifier: 21:B8:52:7C:D5:4B:8C:67:CE:7C:05:21:65:08:BE:BB:EE:48:72:60 Authority key identifier: B7:A0:E7:99:8A:9F:26:6F:38:82:F1:91:18:69:1C:B2:25:35:6F:5D Certificate issuer: /CN=B7A0E7998A9F266F3882F19118691CB225356F5D Certificate serial: 6ABF73338992F357EEFAC98EC06673591FB6DD9D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7A0E7998A9F266F3882F19118691CB225356F5D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 14:24:35 +0000 Manifest this update: Thu 03 Sep 2026 14:19:35 +0000 Manifest next update: Fri 04 Sep 2026 15:00:35 +0000 Files and hashes: 1: 3130332e34372e31302e302f32332d3233203d3e203539323733.roa (hash: zUqTI/Bo3fTJZJzitShFowGX98l0p/JLTSiXxFVwOj4=) 2: 3130332e34372e31312e302f32342d3234203d3e203539323733.roa (hash: i7xKoh7QIZf/wi1EOh2BtN5rz2lc5CUAErnYSBr7+OA=) 3: B7A0E7998A9F266F3882F19118691CB225356F5D.crl (hash: YS4tLIJUQrpOKSAWJQYghw4iu0U872vSiQJPnucx75Y=) 4: 3130332e34372e31302e302f32342d3234203d3e203539323733.roa (hash: bqleVr/CtV0kID5GQzDKQocY8p72teKu2kr0m36+c90=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.crl rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7A0E7998A9F266F3882F19118691CB225356F5D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:bf:73:33:89:92:f3:57:ee:fa:c9:8e:c0:66:73:59:1f:b6:dd:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7A0E7998A9F266F3882F19118691CB225356F5D Validity Not Before: Sep 3 14:19:35 2026 GMT Not After : Sep 4 15:00:35 2026 GMT Subject: CN=21B8527CD54B8C67CE7C05216508BEBBEE487260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:bf:a7:40:79:34:b3:de:62:83:be:6e:48:f2: 8e:9a:c3:eb:a9:ee:ec:de:9a:ab:01:8e:bf:3f:4b: ac:45:a2:36:0a:2b:62:ff:a6:89:9f:49:6d:6d:c7: 68:32:c8:14:18:ed:e8:42:88:4b:f8:d8:83:36:04: 9c:92:57:87:91:0b:b7:76:42:e5:b4:ce:9d:04:ef: a1:37:c4:47:91:f9:f9:6d:36:d5:b8:f0:b9:a9:fd: 9b:d4:73:79:4a:a4:cb:53:ac:f8:92:07:59:b9:fa: 30:da:13:c9:17:30:9d:bd:d5:00:63:46:3b:64:e6: fc:4c:15:4b:40:6f:44:c1:4b:5b:f7:e6:f5:62:a9: 4c:b0:c5:4d:08:a5:42:4f:48:91:30:05:a2:77:47: bb:08:ea:db:44:b2:fc:06:ee:a7:0d:dd:d2:66:05: 4d:61:cb:04:d1:13:aa:17:df:23:ac:0d:e9:01:1c: 3f:0d:60:23:ab:cd:81:c1:b0:79:0d:1a:9f:da:2a: 5f:5f:61:60:75:d3:b5:d9:10:22:fd:11:27:3f:4e: 17:c3:a1:cf:c6:bc:03:06:ea:1e:13:be:b8:88:62: c1:7f:d8:51:98:37:04:a0:7f:51:e3:df:77:7b:e4: a0:0f:55:77:99:f4:8c:75:02:75:0d:44:8f:cc:38: 87:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B8:52:7C:D5:4B:8C:67:CE:7C:05:21:65:08:BE:BB:EE:48:72:60 X509v3 Authority Key Identifier: keyid:B7:A0:E7:99:8A:9F:26:6F:38:82:F1:91:18:69:1C:B2:25:35:6F:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7A0E7998A9F266F3882F19118691CB225356F5D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:59:13:43:34:38:30:43:5f:ad:4c:52:ae:aa:da:a6:60:d9: ee:16:fa:28:f3:c3:d6:c8:68:7e:09:9a:46:4f:d9:b8:9d:4b: 7f:d9:b4:ac:23:88:f3:ed:7c:f0:19:02:50:73:62:3f:ca:23: 67:36:23:23:a3:ff:69:fa:cf:e6:35:5b:4b:54:ff:50:2a:d0: 76:b8:d3:b8:99:5c:d3:c3:5b:bc:68:b7:3a:a4:6c:48:8c:26: 30:82:7e:ef:20:ba:f4:c6:c1:89:bb:4d:45:a6:a5:a5:df:a0: 41:49:b7:d4:67:a3:e7:1a:b5:2b:0d:e5:a6:8d:e3:a2:0c:af: ad:d6:d2:8c:92:77:69:8a:c2:88:f3:af:cf:d8:89:af:6b:be: d3:5f:9f:db:7c:23:1b:50:92:4a:ab:bd:f8:d9:23:b6:9a:52: 3e:b9:88:1e:dd:bd:be:6e:b6:93:dc:c8:1b:5d:e9:5e:d0:95: 39:5a:54:45:1a:f2:2f:41:c0:34:e2:55:54:fa:33:4f:e5:26: 49:a9:80:5d:b7:f7:09:ab:a0:01:49:1c:e9:20:c0:30:1a:b4: 63:6f:5a:82:2d:a4:0d:3b:cb:8e:c0:3c:6a:0b:52:ff:2a:11: 26:99:7b:1d:d1:8d:6d:2e:bc:4d:2a:bd:c4:63:4e:f0:9d:45: 9b:3d:43:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUar9zM4mS81fu+smOwGZzWR+23Z0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdBMEU3OTk4QTlGMjY2RjM4ODJGMTkxMTg2OTFDQjIy NTM1NkY1RDAeFw0yNjA5MDMxNDE5MzVaFw0yNjA5MDQxNTAwMzVaMDMxMTAvBgNV BAMTKDIxQjg1MjdDRDU0QjhDNjdDRTdDMDUyMTY1MDhCRUJCRUU0ODcyNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqv6dAeTSz3mKDvm5I8o6aw+up 7uzemqsBjr8/S6xFojYKK2L/pomfSW1tx2gyyBQY7ehCiEv42IM2BJySV4eRC7d2 QuW0zp0E76E3xEeR+fltNtW48Lmp/ZvUc3lKpMtTrPiSB1m5+jDaE8kXMJ291QBj Rjtk5vxMFUtAb0TBS1v35vViqUywxU0IpUJPSJEwBaJ3R7sI6ttEsvwG7qcN3dJm BU1hywTRE6oX3yOsDekBHD8NYCOrzYHBsHkNGp/aKl9fYWB107XZECL9ESc/ThfD oc/GvAMG6h4TvriIYsF/2FGYNwSgf1Hj33d75KAPVXeZ9Ix1AnUNRI/MOIcdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIbhSfNVLjGfOfAUhZQi+u+5IcmAwHwYDVR0j BBgwFoAUt6DnmYqfJm84gvGRGGkcsiU1b10wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjVhNzJlYjktOGU1My00NDcyLWEzNWEtZmVlOGJmMGFmNDZmLzAvQjdBMEU3OTk4 QTlGMjY2RjM4ODJGMTkxMTg2OTFDQjIyNTM1NkY1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CN0EwRTc5OThBOUYyNjZGMzg4MkYxOTExODY5MUNCMjI1MzU2 RjVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjVhNzJlYjktOGU1My00NDcyLWEz NWEtZmVlOGJmMGFmNDZmLzAvQjdBMEU3OTk4QTlGMjY2RjM4ODJGMTkxMTg2OTFD QjIyNTM1NkY1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJZE0M0ODBDX61MUq6q2qZg2e4W+ijzw9bI aH4JmkZP2bidS3/ZtKwjiPPtfPAZAlBzYj/KI2c2IyOj/2n6z+Y1W0tU/1Aq0Ha4 07iZXNPDW7xotzqkbEiMJjCCfu8guvTGwYm7TUWmpaXfoEFJt9Rno+catSsN5aaN 46IMr63W0oySd2mKwojzr8/Yia9rvtNfn9t8IxtQkkqrvfjZI7aaUj65iB7dvb5u tpPcyBtd6V7QlTlaVEUa8i9BwDTiVVT6M0/lJkmpgF239wmroAFJHOkgwDAatGNv WoItpA07y47APGoLUv8qESaZex3RjW0uvE0qvcRjTvCdRZs9Q2E= -----END CERTIFICATE-----Generated at Thu Sep 3 16:23:01 2026 by rpki-client